My Pixel 2 already does this. When I sign into Google I get a notification that asks if I'm signing in, I click yes, done-zo.
Is the only thing new here the UI + that it's open for all Android 7.0 phones now?
Is the only thing new here the UI + that it's open for all Android 7.0 phones now?
The thing you have now communicates that yes click over the internet. This new thing communicates through a local channel (bluetooth).
Communicating over a local channel prevents phishing.
Consider this attack: Attacker hosts googlee.com and you get tricked into going there. The login site looks exactly like the google site. You type in username/password just like normal. In that moment they take your phished credentials and pass it to the actual google server, like a man in the middle. Now you receive a prompt on your phone asking Yes/No. You click yes, okaying the attacker's login.
Now that same attack with the local channel communication - they can't take your signal and pass it on through to google
1. It doesn't seem to be using the Titan M flow on my Pixel 3 currently
2. After reinstalling GMS on my phone to try and get the Titan M working, it stayed registered as a key, but the prompt never shows up on my device.
I guess this is more of a "flag for internal review" vs a "please provide me with answers".
Re 1: The Titan-M specific flow is still rolling out, you should see your phone switch to the volume-down UI soon.
Re 2: I've flagged this and we'll look into it.